CVE-2024-35250

Name of the Vulnerable Software and Affected Versions Windows Kernel-Mode Driver (affected versions not specified)

Description The issue is related to an untrusted pointer dereference weakness in the Microsoft Kernel Streaming Service (MSKSSRV.SYS), allowing local attackers to gain SYSTEM privileges in low-complexity attacks that don't require user interaction. This vulnerability is being actively exploited to gain SYSTEM privileges on compromised machines. The estimated number of potentially affected devices worldwide is not specified. However, it is mentioned that over 145,000 servers are potentially at risk due to a related vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.